Intel Driver & Support Assistant vulnerabilities

24 CVEs affecting Intel Driver & Support Assistant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-36488, published 2024-11-13.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-27515, published 2023-08-11. Critical severity, CVSS 9.6. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access.
• CVE-2022-26017, published 2022-08-18. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
• CVE-2019-11095, published 2019-05-17. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable information disclosure via local access.
• CVE-2020-0568, published 2020-04-15. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2019-11146, published 2019-08-19. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2018-12148, published 2018-09-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access.
• CVE-2019-11114, published 2019-05-17. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access.
• CVE-2023-42099, published 2024-05-03. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver &…
• CVE-2018-3610, published 2018-01-09. Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days. SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and writing to Memory Status registers potentially allowing information disclosure…
• CVE-2019-11145, published 2019-08-19. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Latest

• CVE-2024-36488, published 2024-11-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2024-36294, published 2024-11-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-45743, published 2024-05-16. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-50197, published 2024-05-03. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver &…
• CVE-2023-39425, published 2024-02-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2023-35062, published 2024-02-14. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2023-25073, published 2024-02-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2022-32764, published 2023-02-16. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access.